tomcat manager with weak password compromised. Any idea about the payload?

Hi, An instance running tomcat 6.0.24 as root in our developer network was compromised today by a scanning bot which deployed a war file and then deleted the on disk file, before scanning for new hosts until the IDS detected it. Obviously this is not a flaw in tomcat, but I was hoping someon

multiple Context elements in conf/context.xml file

my existing conf/context.xml file has already a element; WEB-INF/web.xml I would like to add another to allow access to the /manager/status location to my monitoring, however adding a new Context element like so; conf/context.xml WEB-INF/web.xml breaks the x

Re: apache intermittently returning 503 errors from tomcat

Tom H wrote: Hi, On my RHEL4 ES box, with tomcat 5.5.9 from the redhat Application Server subscription package - I am seeing these messages in the catalina.out and these correspond to a 503 error displayed to the browser; 08-Nov-2007 20:34:45 org.apache.jk.common.ChannelSocket

apache intermittently returning 503 errors from tomcat

Hi, On my RHEL4 ES box, with tomcat 5.5.9 from the redhat Application Server subscription package - I am seeing these messages in the catalina.out and these correspond to a 503 error displayed to the browser; 08-Nov-2007 20:34:45 org.apache.jk.common.ChannelSocket processConnection WARNING: p

example to log "org.apache.catalina.core" entries to separate file

Hi, I have default tomcat 5.5 installation, and I would like to send the tomcat start stop events to a separate log file for the class "org.apache.catalina.core" Can any one provide an example of a config for logging.properties that would do that, it currently looks like this; handlers =

syslog restarts and reloads of tomcat 5.5 and 6.0

Hi, I have a bunch of tomcat servers in a clustered configuration, and currently we use a syslog-ng for aggregating the log files off these hosts. I was wondering whether it was possible to cause tomcat to syslog its start, stop, restart, reload actions to syslog, maybe using log4j? It wou

rpm for tomcat 5.5 compatitble with java 1.6

Hi, I have been asked to install tomcat 5.5 with Java 1.6 on a box for a developer. I was hoping to stick with RH packages, but this combination does not seem to be available yet. Are there are repositories maintaining a Tomcat 5.5 that is compatible with the Sun java SE 1.6 rpm available at

file is use on tomcat 5.0.28 though application has been stopped and undeployed

thing else I can try to prevent the locking? I am on windows xp prof, with current sp and updates. Thanks, Tom H - To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For addit